Documents, tasks, conversations, calls and shared drives in one place — all sealed client-side, all revocable, all logged without exposing content.
“Collaboration that does not require trusting a vendor's restraint.”
For studios, agencies, law and finance teams, r&d groups and any organisation whose work would be damaging in someone else's hands.
Write and co-edit rich documents, import Word, Google Docs and Notion exports, and keep everything inside the encrypted vault.
Turn a message into a task with assignees, priority and due dates, without exporting context into a third-party tracker.
Each member holds their own sealed copy of the folder key; there is no shared master password to circulate.
Protected links with passphrase, expiry, view-once, watermarking and revocation for people outside the workspace.
Previous versions and deleted items are retained so a mistake is recoverable without a support ticket.
Storage runs on EU infrastructure with immutable encrypted snapshots and automatic failover between providers.
Most collaboration incidents are not dramatic breaches; they are a bot, a connected app, a personal export or an over-shared link. A workspace where content is unreadable to the platform also makes it unreadable to everything bolted onto the platform.
Encryption runs in a worker pool on your device, transcripts are cached locally, media is warmed in the background and channels switch instantly. The experience target is a mainstream product, not a security demo.
Chat, drive, docs and shares share the same identity and key hierarchy. Offboarding is one action with a provable trail, rather than a checklist across four vendors.
Yes, through protected links: the decryption key travels in the URL fragment, which is never sent to the server, and the link is additionally protected by a passphrase and an expiry.
Yes. Import exports from Slack, Teams, Notion, Google and common messengers, and mirror a local folder continuously with Live Clone while teams move over.
No. Everything is encrypted on the device before it leaves it, with XChaCha20-Poly1305, using keys derived locally with Argon2id and wrapped per member with X25519. Our servers hold ciphertext and sealed key envelopes, so there is no admin view, no support tool and no classifier that can reach your content.
No. There is nothing to self-host and nothing to configure: you create an account, invite people by email, and encryption happens transparently in the browser and apps. Zero-knowledge here is the default, not an expert mode.
Yes. The free plan includes 1 GB with exactly the same zero-knowledge architecture as paid plans, so you can validate the workflow before moving a studio onto it.
Removing a member revokes their access and rotates the remaining key envelopes, so their old copy of the key stops opening anything new. Every membership change is written to an append-only audit trail.
Because we cannot read your data, we cannot reset it for you. Each account creates a Recovery Kit — a printable PDF with a QR code — to keep offline. That is the same property that stops anyone else, including us, from reading your workspace.
Start free with 1 GB. Zero-knowledge encryption from the first upload — no admin override, no AI scanning, no plaintext on the server.
